Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
File: GkUkezobAmknHXRsWl-sAUX_MyI.cer (raw, json)
Hash identifier: oCnvyub+r6L9G0Wk5f+O6nlsCIHKEpbyjK2MAjbGbtE=
Subject key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 02B173
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 02 May 2026 12:27:12 +0000
Certificate not after: Fri 30 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 152680
IP: 117.103.112.0/23
IP: 2001:df3:a540::/48
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176499 (0x2b173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: May 2 12:27:12 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:c3:ff:e0:2f:76:c2:7a:a7:53:d6:be:3a:
fb:c6:d0:1c:1c:d4:a4:32:78:49:b4:94:85:3c:fe:
b9:aa:58:32:45:b6:f0:f7:47:3f:bb:40:80:6d:47:
b7:42:91:5d:69:14:1d:f1:4a:e5:db:8e:aa:1f:8d:
18:bb:9e:08:f7:b8:c0:cb:ab:69:19:a0:bd:1c:6e:
32:b2:28:ef:d1:e1:a3:36:cc:28:cd:39:22:fc:bb:
40:d0:ce:f3:17:7a:39:8a:f7:be:2f:c4:55:68:9e:
16:46:63:58:eb:e1:3d:0f:b5:e1:39:3a:52:8d:56:
5f:c3:7b:44:52:64:29:f9:a4:97:3e:e3:ef:ed:e5:
db:2f:c3:48:d4:54:0f:ad:74:00:d0:11:8a:95:ea:
6e:44:d4:24:63:68:64:20:e0:7c:e5:e3:97:1a:7e:
2e:33:7e:c5:3c:bd:40:c3:5f:c4:d9:2e:70:87:bc:
e1:91:4d:60:80:93:d1:a2:a5:03:27:bc:8e:00:6e:
c7:31:fd:0d:79:bc:9b:13:f1:c7:c4:3c:1f:58:e7:
ad:6a:68:70:53:7e:bd:bd:de:11:79:73:b4:48:00:
df:9d:6c:30:64:a1:f3:c8:24:0e:3b:e1:04:86:a0:
c3:4c:18:8c:81:1f:ec:09:ae:80:39:b7:35:fb:ee:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
152680
sbgp-ipAddrBlock: critical
IPv4:
117.103.112.0/23
IPv6:
2001:df3:a540::/48
Signature Algorithm: sha256WithRSAEncryption
9e:b0:b4:4e:5c:e8:98:20:8f:63:3b:8e:73:3b:e9:a3:b1:81:
e7:af:b6:c2:03:03:56:29:29:cc:26:aa:3c:99:25:63:bc:b9:
98:ad:74:36:2d:c7:d6:1c:d3:39:73:3f:b9:0d:ca:28:ed:65:
ba:08:21:2d:c4:5e:7a:92:50:e2:54:82:41:d3:a8:dc:ac:33:
b0:54:d9:f5:d2:cc:a0:53:f6:68:31:c3:da:1e:42:64:c4:ad:
3d:9c:7e:8e:c3:2a:0a:10:5c:ee:de:bd:09:07:47:0c:85:67:
c3:46:29:07:8e:e2:06:c6:3a:7c:14:81:a6:f6:bb:c5:07:f7:
bd:6a:dd:76:d0:f7:b2:74:26:6f:6c:09:81:97:79:b5:f9:df:
ba:6d:22:c6:83:48:d9:56:67:29:82:d2:bd:f5:9b:3a:b2:9f:
d5:fc:74:ba:d3:15:e5:0a:ce:2b:95:7c:ce:2e:6b:5b:d0:1f:
1d:d2:52:bb:49:f7:65:a0:b0:1f:32:4f:d1:68:c5:7f:41:a0:
1d:66:71:7f:31:c0:80:73:c6:a9:b3:e2:fe:2c:6d:80:f0:f8:
0a:8c:53:0a:d6:cc:cd:ca:50:02:86:a3:8b:74:46:44:30:d8:
64:ee:85:18:df:19:1e:0e:e7:74:b8:5c:00:3c:df:8c:9c:c9:
64:d5:11:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 09:06:53 2026 by rpki-client